# AWS Backup extends logically air-gapped vaults to FSx for NetApp ONTAP > FSx for NetApp ONTAP backups can now use AWS Backup’s logically air-gapped vaults, with immutable backups and cross-account direct restores. Canonical URL: https://www.devobs.io/news/news-event-0d1c051fa05cb3f8ce51b66c/ By: Lena Fischer Published: 2026-10-01T20:32:27.109Z Updated: 2026-10-01T20:32:27.109Z Event date: 2026-09-28 Section: Cloud AWS announced on September 28, 2026 that AWS Backup’s logically air-gapped vaults now support Amazon FSx for NetApp ONTAP. The vaults support sharing backups across accounts and AWS Organizations, including direct restore from a receiving account without first copying the backup. AWS positions that restore path as a way to reduce recovery time after data loss. [AWS announcement](https://aws.amazon.com/about-aws/whats-new/2026/09/aws-backup-air-gapped-vault-fsx-ontap/) ## Protection and restore paths AWS describes logically air-gapped vaults as storing immutable backups that are locked by default, with encryption using AWS owned keys or customer-managed keys. The announcement says FSx for NetApp ONTAP backups can be stored in these vaults within the same account or across accounts and Regions. [Backup protection details](https://aws.amazon.com/about-aws/whats-new/2026/09/aws-backup-air-gapped-vault-fsx-ontap/) Teams can configure the feature through the AWS Backup console, AWS Command Line Interface or AWS SDKs. A backup plan can specify the logically air-gapped vault as its primary target or as a copy destination. AWS Resource Access Manager supports sharing the vault with another account for recovery or restore testing; the receiving account can then initiate a direct restore without an intermediate backup copy. [Configuration and restore details](https://aws.amazon.com/about-aws/whats-new/2026/09/aws-backup-air-gapped-vault-fsx-ontap/) ## What changes for recovery planning For recovery planning, the useful distinction is between protecting a backup and being able to restore it from another account. Direct restore removes a copy step from that workflow, but AWS’s announcement does not quantify the recovery-time improvement. [AWS’s recovery-time statement](https://aws.amazon.com/about-aws/whats-new/2026/09/aws-backup-air-gapped-vault-fsx-ontap/) Engineering teams should test the receiving account’s permissions and the intended FSx restore workflow, then measure elapsed recovery time against their own objectives. Treat the shorter restore path as a runbook simplification—not proof that a recovery-time target will be met. ## Availability depends on regional overlap Support is available in all AWS Regions where **both** logically air-gapped vaults and Amazon FSx for NetApp ONTAP are available, rather than unconditionally across every AWS Region. Teams planning cross-Region recovery should verify that overlap before selecting destinations. [Availability statement](https://aws.amazon.com/about-aws/whats-new/2026/09/aws-backup-air-gapped-vault-fsx-ontap/) ## Source references -